aws-sdk-bedrockagentcorecontrol 1.14.0 → 1.15.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ed09ddd82e1cccc46ff28d6643442f086e9a0271aa136c8a8f5a83abc61d76f6
-  data.tar.gz: cc9a2648ce01392a6b4171300dcfab528dcd3413cf35935367b03838e8926904
+  metadata.gz: 3c2b42916b4c3f1f0d7583d96941910bfbf219d88550116548cc7e7ea2a375f9
+  data.tar.gz: ed0b344ca09f8fc2c815c4e713b3525bd1987fee68b2d68fbda9ca5e1645b94b
 SHA512:
-  metadata.gz: dcb0d28c96352e846b1049bad9cdf4c48d2094ee3d5f36995b7d7e7b680d1d19b116c72fb7b2faf0ab331777b99de05e2d19c5be690c82e3988c6a53ad961e66
-  data.tar.gz: 82640d7f265d234592cc06469f16f0bc4b44d30130d8dd1cfef7eda9d515d65ac8721ccfbe258fba8df487098529bfff59207ede57bdfc2c461d63cf7a34a7b4
+  metadata.gz: e2d099c110256650d24d6586aecac3dfaf4f9e62a8b1c55a582adcde0cb912d7cde55121ba8a12c05845e413ae2a67e40c9fc6a026fed4ae14e28a30763026e2
+  data.tar.gz: a5f789b15f95b501e788767d30525883d99a4bed6d591100b80e73490c3dc8824a6125c793ac2b0e003839a394760ac24d76c9e52f7753c4b2bf7d979ba98311

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.15.0 (2025-11-21)
+------------------
+
+* Feature - Support for agentcore gateway interceptor configurations and NONE authorizer type
+
 1.14.0 (2025-11-03)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.14.0
+1.15.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -929,6 +929,8 @@ module Aws::BedrockAgentCoreControl
     #
     #   * `AWS_IAM` - Authorize with your Amazon Web Services IAM credentials.
     #
+    #   * `NONE` - No authorization
+    #
     # @option params [Types::AuthorizerConfiguration] :authorizer_configuration
     #   The authorizer configuration for the gateway. Required if
     #   `authorizerType` is `CUSTOM_JWT`.
@@ -937,6 +939,11 @@ module Aws::BedrockAgentCoreControl
     #   The Amazon Resource Name (ARN) of the KMS key used to encrypt data
     #   associated with the gateway.
     #
+    # @option params [Array<Types::GatewayInterceptorConfiguration>] :interceptor_configurations
+    #   A list of configuration settings for a gateway interceptor. Gateway
+    #   interceptors allow custom code to be invoked during gateway
+    #   invocations.
+    #
     # @option params [String] :exception_level
     #   The level of detail in error messages returned when invoking the
     #   gateway.
@@ -968,6 +975,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::CreateGatewayResponse#authorizer_type #authorizer_type} => String
     #   * {Types::CreateGatewayResponse#authorizer_configuration #authorizer_configuration} => Types::AuthorizerConfiguration
     #   * {Types::CreateGatewayResponse#kms_key_arn #kms_key_arn} => String
+    #   * {Types::CreateGatewayResponse#interceptor_configurations #interceptor_configurations} => Array&lt;Types::GatewayInterceptorConfiguration&gt;
     #   * {Types::CreateGatewayResponse#workload_identity_details #workload_identity_details} => Types::WorkloadIdentityDetails
     #   * {Types::CreateGatewayResponse#exception_level #exception_level} => String
     #
@@ -986,7 +994,7 @@ module Aws::BedrockAgentCoreControl
     #         search_type: "SEMANTIC", # accepts SEMANTIC
     #       },
     #     },
-    #     authorizer_type: "CUSTOM_JWT", # required, accepts CUSTOM_JWT, AWS_IAM
+    #     authorizer_type: "CUSTOM_JWT", # required, accepts CUSTOM_JWT, AWS_IAM, NONE
     #     authorizer_configuration: {
     #       custom_jwt_authorizer: {
     #         discovery_url: "DiscoveryUrl", # required
@@ -995,6 +1003,19 @@ module Aws::BedrockAgentCoreControl
     #       },
     #     },
     #     kms_key_arn: "KmsKeyArn",
+    #     interceptor_configurations: [
+    #       {
+    #         interceptor: { # required
+    #           lambda: {
+    #             arn: "LambdaFunctionArn", # required
+    #           },
+    #         },
+    #         interception_points: ["REQUEST"], # required, accepts REQUEST, RESPONSE
+    #         input_configuration: {
+    #           pass_request_headers: false, # required
+    #         },
+    #       },
+    #     ],
     #     exception_level: "DEBUG", # accepts DEBUG
     #     tags: {
     #       "TagKey" => "TagValue",
@@ -1019,13 +1040,18 @@ module Aws::BedrockAgentCoreControl
     #   resp.protocol_configuration.mcp.supported_versions[0] #=> String
     #   resp.protocol_configuration.mcp.instructions #=> String
     #   resp.protocol_configuration.mcp.search_type #=> String, one of "SEMANTIC"
-    #   resp.authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM"
+    #   resp.authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM", "NONE"
     #   resp.authorizer_configuration.custom_jwt_authorizer.discovery_url #=> String
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_audience #=> Array
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_audience[0] #=> String
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_clients #=> Array
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_clients[0] #=> String
     #   resp.kms_key_arn #=> String
+    #   resp.interceptor_configurations #=> Array
+    #   resp.interceptor_configurations[0].interceptor.lambda.arn #=> String
+    #   resp.interceptor_configurations[0].interception_points #=> Array
+    #   resp.interceptor_configurations[0].interception_points[0] #=> String, one of "REQUEST", "RESPONSE"
+    #   resp.interceptor_configurations[0].input_configuration.pass_request_headers #=> Boolean
     #   resp.workload_identity_details.workload_identity_arn #=> String
     #   resp.exception_level #=> String, one of "DEBUG"
     #
@@ -2291,6 +2317,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetGatewayResponse#authorizer_type #authorizer_type} => String
     #   * {Types::GetGatewayResponse#authorizer_configuration #authorizer_configuration} => Types::AuthorizerConfiguration
     #   * {Types::GetGatewayResponse#kms_key_arn #kms_key_arn} => String
+    #   * {Types::GetGatewayResponse#interceptor_configurations #interceptor_configurations} => Array&lt;Types::GatewayInterceptorConfiguration&gt;
     #   * {Types::GetGatewayResponse#workload_identity_details #workload_identity_details} => Types::WorkloadIdentityDetails
     #   * {Types::GetGatewayResponse#exception_level #exception_level} => String
     #
@@ -2318,13 +2345,18 @@ module Aws::BedrockAgentCoreControl
     #   resp.protocol_configuration.mcp.supported_versions[0] #=> String
     #   resp.protocol_configuration.mcp.instructions #=> String
     #   resp.protocol_configuration.mcp.search_type #=> String, one of "SEMANTIC"
-    #   resp.authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM"
+    #   resp.authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM", "NONE"
     #   resp.authorizer_configuration.custom_jwt_authorizer.discovery_url #=> String
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_audience #=> Array
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_audience[0] #=> String
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_clients #=> Array
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_clients[0] #=> String
     #   resp.kms_key_arn #=> String
+    #   resp.interceptor_configurations #=> Array
+    #   resp.interceptor_configurations[0].interceptor.lambda.arn #=> String
+    #   resp.interceptor_configurations[0].interception_points #=> Array
+    #   resp.interceptor_configurations[0].interception_points[0] #=> String, one of "REQUEST", "RESPONSE"
+    #   resp.interceptor_configurations[0].input_configuration.pass_request_headers #=> Boolean
     #   resp.workload_identity_details.workload_identity_arn #=> String
     #   resp.exception_level #=> String, one of "DEBUG"
     #
@@ -3056,7 +3088,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.items[0].description #=> String
     #   resp.items[0].created_at #=> Time
     #   resp.items[0].updated_at #=> Time
-    #   resp.items[0].authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM"
+    #   resp.items[0].authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM", "NONE"
     #   resp.items[0].protocol_type #=> String, one of "MCP"
     #   resp.next_token #=> String
     #
@@ -3673,6 +3705,9 @@ module Aws::BedrockAgentCoreControl
     # @option params [String] :kms_key_arn
     #   The updated ARN of the KMS key used to encrypt the gateway.
     #
+    # @option params [Array<Types::GatewayInterceptorConfiguration>] :interceptor_configurations
+    #   The updated interceptor configurations for the gateway.
+    #
     # @option params [String] :exception_level
     #   The level of detail in error messages returned when invoking the
     #   gateway.
@@ -3700,6 +3735,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::UpdateGatewayResponse#authorizer_type #authorizer_type} => String
     #   * {Types::UpdateGatewayResponse#authorizer_configuration #authorizer_configuration} => Types::AuthorizerConfiguration
     #   * {Types::UpdateGatewayResponse#kms_key_arn #kms_key_arn} => String
+    #   * {Types::UpdateGatewayResponse#interceptor_configurations #interceptor_configurations} => Array&lt;Types::GatewayInterceptorConfiguration&gt;
     #   * {Types::UpdateGatewayResponse#workload_identity_details #workload_identity_details} => Types::WorkloadIdentityDetails
     #   * {Types::UpdateGatewayResponse#exception_level #exception_level} => String
     #
@@ -3718,7 +3754,7 @@ module Aws::BedrockAgentCoreControl
     #         search_type: "SEMANTIC", # accepts SEMANTIC
     #       },
     #     },
-    #     authorizer_type: "CUSTOM_JWT", # required, accepts CUSTOM_JWT, AWS_IAM
+    #     authorizer_type: "CUSTOM_JWT", # required, accepts CUSTOM_JWT, AWS_IAM, NONE
     #     authorizer_configuration: {
     #       custom_jwt_authorizer: {
     #         discovery_url: "DiscoveryUrl", # required
@@ -3727,6 +3763,19 @@ module Aws::BedrockAgentCoreControl
     #       },
     #     },
     #     kms_key_arn: "KmsKeyArn",
+    #     interceptor_configurations: [
+    #       {
+    #         interceptor: { # required
+    #           lambda: {
+    #             arn: "LambdaFunctionArn", # required
+    #           },
+    #         },
+    #         interception_points: ["REQUEST"], # required, accepts REQUEST, RESPONSE
+    #         input_configuration: {
+    #           pass_request_headers: false, # required
+    #         },
+    #       },
+    #     ],
     #     exception_level: "DEBUG", # accepts DEBUG
     #   })
     #
@@ -3748,13 +3797,18 @@ module Aws::BedrockAgentCoreControl
     #   resp.protocol_configuration.mcp.supported_versions[0] #=> String
     #   resp.protocol_configuration.mcp.instructions #=> String
     #   resp.protocol_configuration.mcp.search_type #=> String, one of "SEMANTIC"
-    #   resp.authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM"
+    #   resp.authorizer_type #=> String, one of "CUSTOM_JWT", "AWS_IAM", "NONE"
     #   resp.authorizer_configuration.custom_jwt_authorizer.discovery_url #=> String
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_audience #=> Array
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_audience[0] #=> String
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_clients #=> Array
     #   resp.authorizer_configuration.custom_jwt_authorizer.allowed_clients[0] #=> String
     #   resp.kms_key_arn #=> String
+    #   resp.interceptor_configurations #=> Array
+    #   resp.interceptor_configurations[0].interceptor.lambda.arn #=> String
+    #   resp.interceptor_configurations[0].interception_points #=> Array
+    #   resp.interceptor_configurations[0].interception_points[0] #=> String, one of "REQUEST", "RESPONSE"
+    #   resp.interceptor_configurations[0].input_configuration.pass_request_headers #=> Boolean
     #   resp.workload_identity_details.workload_identity_arn #=> String
     #   resp.exception_level #=> String, one of "DEBUG"
     #
@@ -4422,7 +4476,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.14.0'
+      context[:gem_version] = '1.15.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb

@@ -155,6 +155,10 @@ module Aws::BedrockAgentCoreControl
     GatewayDescription = Shapes::StringShape.new(name: 'GatewayDescription')
     GatewayId = Shapes::StringShape.new(name: 'GatewayId')
     GatewayIdentifier = Shapes::StringShape.new(name: 'GatewayIdentifier')
+    GatewayInterceptionPoint = Shapes::StringShape.new(name: 'GatewayInterceptionPoint')
+    GatewayInterceptionPoints = Shapes::ListShape.new(name: 'GatewayInterceptionPoints')
+    GatewayInterceptorConfiguration = Shapes::StructureShape.new(name: 'GatewayInterceptorConfiguration')
+    GatewayInterceptorConfigurations = Shapes::ListShape.new(name: 'GatewayInterceptorConfigurations')
     GatewayMaxResults = Shapes::IntegerShape.new(name: 'GatewayMaxResults')
     GatewayName = Shapes::StringShape.new(name: 'GatewayName')
     GatewayNextToken = Shapes::StringShape.new(name: 'GatewayNextToken')
@@ -197,6 +201,8 @@ module Aws::BedrockAgentCoreControl
     IncludedOauth2ProviderConfigOutput = Shapes::StructureShape.new(name: 'IncludedOauth2ProviderConfigOutput')
     InlinePayload = Shapes::StringShape.new(name: 'InlinePayload')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
+    InterceptorConfiguration = Shapes::UnionShape.new(name: 'InterceptorConfiguration')
+    InterceptorInputConfiguration = Shapes::StructureShape.new(name: 'InterceptorInputConfiguration')
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
     InvocationConfiguration = Shapes::StructureShape.new(name: 'InvocationConfiguration')
     InvocationConfigurationInput = Shapes::StructureShape.new(name: 'InvocationConfigurationInput')
@@ -206,6 +212,7 @@ module Aws::BedrockAgentCoreControl
     KmsConfiguration = Shapes::StructureShape.new(name: 'KmsConfiguration')
     KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
     LambdaFunctionArn = Shapes::StringShape.new(name: 'LambdaFunctionArn')
+    LambdaInterceptorConfiguration = Shapes::StructureShape.new(name: 'LambdaInterceptorConfiguration')
     LifecycleConfiguration = Shapes::StructureShape.new(name: 'LifecycleConfiguration')
     LifecycleConfigurationIdleRuntimeSessionTimeoutInteger = Shapes::IntegerShape.new(name: 'LifecycleConfigurationIdleRuntimeSessionTimeoutInteger')
     LifecycleConfigurationMaxLifetimeInteger = Shapes::IntegerShape.new(name: 'LifecycleConfigurationMaxLifetimeInteger')
@@ -663,6 +670,7 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayRequest.add_member(:authorizer_type, Shapes::ShapeRef.new(shape: AuthorizerType, required: true, location_name: "authorizerType"))
     CreateGatewayRequest.add_member(:authorizer_configuration, Shapes::ShapeRef.new(shape: AuthorizerConfiguration, location_name: "authorizerConfiguration"))
     CreateGatewayRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
+    CreateGatewayRequest.add_member(:interceptor_configurations, Shapes::ShapeRef.new(shape: GatewayInterceptorConfigurations, location_name: "interceptorConfigurations"))
     CreateGatewayRequest.add_member(:exception_level, Shapes::ShapeRef.new(shape: ExceptionLevel, location_name: "exceptionLevel"))
     CreateGatewayRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagsMap, location_name: "tags"))
     CreateGatewayRequest.struct_class = Types::CreateGatewayRequest
@@ -682,6 +690,7 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayResponse.add_member(:authorizer_type, Shapes::ShapeRef.new(shape: AuthorizerType, required: true, location_name: "authorizerType"))
     CreateGatewayResponse.add_member(:authorizer_configuration, Shapes::ShapeRef.new(shape: AuthorizerConfiguration, location_name: "authorizerConfiguration"))
     CreateGatewayResponse.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
+    CreateGatewayResponse.add_member(:interceptor_configurations, Shapes::ShapeRef.new(shape: GatewayInterceptorConfigurations, location_name: "interceptorConfigurations"))
     CreateGatewayResponse.add_member(:workload_identity_details, Shapes::ShapeRef.new(shape: WorkloadIdentityDetails, location_name: "workloadIdentityDetails"))
     CreateGatewayResponse.add_member(:exception_level, Shapes::ShapeRef.new(shape: ExceptionLevel, location_name: "exceptionLevel"))
     CreateGatewayResponse.struct_class = Types::CreateGatewayResponse
@@ -922,6 +931,15 @@ module Aws::BedrockAgentCoreControl
     ExtractionConfiguration.add_member_subclass(:unknown, Types::ExtractionConfiguration::Unknown)
     ExtractionConfiguration.struct_class = Types::ExtractionConfiguration
 
+    GatewayInterceptionPoints.member = Shapes::ShapeRef.new(shape: GatewayInterceptionPoint)
+
+    GatewayInterceptorConfiguration.add_member(:interceptor, Shapes::ShapeRef.new(shape: InterceptorConfiguration, required: true, location_name: "interceptor"))
+    GatewayInterceptorConfiguration.add_member(:interception_points, Shapes::ShapeRef.new(shape: GatewayInterceptionPoints, required: true, location_name: "interceptionPoints"))
+    GatewayInterceptorConfiguration.add_member(:input_configuration, Shapes::ShapeRef.new(shape: InterceptorInputConfiguration, location_name: "inputConfiguration"))
+    GatewayInterceptorConfiguration.struct_class = Types::GatewayInterceptorConfiguration
+
+    GatewayInterceptorConfigurations.member = Shapes::ShapeRef.new(shape: GatewayInterceptorConfiguration)
+
     GatewayProtocolConfiguration.add_member(:mcp, Shapes::ShapeRef.new(shape: MCPGatewayConfiguration, location_name: "mcp"))
     GatewayProtocolConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     GatewayProtocolConfiguration.add_member_subclass(:mcp, Types::GatewayProtocolConfiguration::Mcp)
@@ -1055,6 +1073,7 @@ module Aws::BedrockAgentCoreControl
     GetGatewayResponse.add_member(:authorizer_type, Shapes::ShapeRef.new(shape: AuthorizerType, required: true, location_name: "authorizerType"))
     GetGatewayResponse.add_member(:authorizer_configuration, Shapes::ShapeRef.new(shape: AuthorizerConfiguration, location_name: "authorizerConfiguration"))
     GetGatewayResponse.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
+    GetGatewayResponse.add_member(:interceptor_configurations, Shapes::ShapeRef.new(shape: GatewayInterceptorConfigurations, location_name: "interceptorConfigurations"))
     GetGatewayResponse.add_member(:workload_identity_details, Shapes::ShapeRef.new(shape: WorkloadIdentityDetails, location_name: "workloadIdentityDetails"))
     GetGatewayResponse.add_member(:exception_level, Shapes::ShapeRef.new(shape: ExceptionLevel, location_name: "exceptionLevel"))
     GetGatewayResponse.struct_class = Types::GetGatewayResponse
@@ -1140,6 +1159,15 @@ module Aws::BedrockAgentCoreControl
     IncludedOauth2ProviderConfigOutput.add_member(:client_id, Shapes::ShapeRef.new(shape: ClientIdType, location_name: "clientId"))
     IncludedOauth2ProviderConfigOutput.struct_class = Types::IncludedOauth2ProviderConfigOutput
 
+    InterceptorConfiguration.add_member(:lambda, Shapes::ShapeRef.new(shape: LambdaInterceptorConfiguration, location_name: "lambda"))
+    InterceptorConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    InterceptorConfiguration.add_member_subclass(:lambda, Types::InterceptorConfiguration::Lambda)
+    InterceptorConfiguration.add_member_subclass(:unknown, Types::InterceptorConfiguration::Unknown)
+    InterceptorConfiguration.struct_class = Types::InterceptorConfiguration
+
+    InterceptorInputConfiguration.add_member(:pass_request_headers, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "passRequestHeaders"))
+    InterceptorInputConfiguration.struct_class = Types::InterceptorInputConfiguration
+
     InternalServerException.add_member(:message, Shapes::ShapeRef.new(shape: NonBlankString, location_name: "message"))
     InternalServerException.struct_class = Types::InternalServerException
 
@@ -1155,6 +1183,9 @@ module Aws::BedrockAgentCoreControl
     KmsConfiguration.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
     KmsConfiguration.struct_class = Types::KmsConfiguration
 
+    LambdaInterceptorConfiguration.add_member(:arn, Shapes::ShapeRef.new(shape: LambdaFunctionArn, required: true, location_name: "arn"))
+    LambdaInterceptorConfiguration.struct_class = Types::LambdaInterceptorConfiguration
+
     LifecycleConfiguration.add_member(:idle_runtime_session_timeout, Shapes::ShapeRef.new(shape: LifecycleConfigurationIdleRuntimeSessionTimeoutInteger, location_name: "idleRuntimeSessionTimeout"))
     LifecycleConfiguration.add_member(:max_lifetime, Shapes::ShapeRef.new(shape: LifecycleConfigurationMaxLifetimeInteger, location_name: "maxLifetime"))
     LifecycleConfiguration.struct_class = Types::LifecycleConfiguration
@@ -1786,6 +1817,7 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayRequest.add_member(:authorizer_type, Shapes::ShapeRef.new(shape: AuthorizerType, required: true, location_name: "authorizerType"))
     UpdateGatewayRequest.add_member(:authorizer_configuration, Shapes::ShapeRef.new(shape: AuthorizerConfiguration, location_name: "authorizerConfiguration"))
     UpdateGatewayRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
+    UpdateGatewayRequest.add_member(:interceptor_configurations, Shapes::ShapeRef.new(shape: GatewayInterceptorConfigurations, location_name: "interceptorConfigurations"))
     UpdateGatewayRequest.add_member(:exception_level, Shapes::ShapeRef.new(shape: ExceptionLevel, location_name: "exceptionLevel"))
     UpdateGatewayRequest.struct_class = Types::UpdateGatewayRequest
 
@@ -1804,6 +1836,7 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayResponse.add_member(:authorizer_type, Shapes::ShapeRef.new(shape: AuthorizerType, required: true, location_name: "authorizerType"))
     UpdateGatewayResponse.add_member(:authorizer_configuration, Shapes::ShapeRef.new(shape: AuthorizerConfiguration, location_name: "authorizerConfiguration"))
     UpdateGatewayResponse.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
+    UpdateGatewayResponse.add_member(:interceptor_configurations, Shapes::ShapeRef.new(shape: GatewayInterceptorConfigurations, location_name: "interceptorConfigurations"))
     UpdateGatewayResponse.add_member(:workload_identity_details, Shapes::ShapeRef.new(shape: WorkloadIdentityDetails, location_name: "workloadIdentityDetails"))
     UpdateGatewayResponse.add_member(:exception_level, Shapes::ShapeRef.new(shape: ExceptionLevel, location_name: "exceptionLevel"))
     UpdateGatewayResponse.struct_class = Types::UpdateGatewayResponse

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -1068,6 +1068,8 @@ module Aws::BedrockAgentCoreControl
     #
     #   * `AWS_IAM` - Authorize with your Amazon Web Services IAM
     #     credentials.
+    #
+    #   * `NONE` - No authorization
     #   @return [String]
     #
     # @!attribute [rw] authorizer_configuration
@@ -1080,6 +1082,12 @@ module Aws::BedrockAgentCoreControl
     #   associated with the gateway.
     #   @return [String]
     #
+    # @!attribute [rw] interceptor_configurations
+    #   A list of configuration settings for a gateway interceptor. Gateway
+    #   interceptors allow custom code to be invoked during gateway
+    #   invocations.
+    #   @return [Array<Types::GatewayInterceptorConfiguration>]
+    #
     # @!attribute [rw] exception_level
     #   The level of detail in error messages returned when invoking the
     #   gateway.
@@ -1108,6 +1116,7 @@ module Aws::BedrockAgentCoreControl
       :authorizer_type,
       :authorizer_configuration,
       :kms_key_arn,
+      :interceptor_configurations,
       :exception_level,
       :tags)
       SENSITIVE = [:name, :description]
@@ -1176,6 +1185,10 @@ module Aws::BedrockAgentCoreControl
     #   associated with the gateway.
     #   @return [String]
     #
+    # @!attribute [rw] interceptor_configurations
+    #   The list of interceptor configurations for the created gateway.
+    #   @return [Array<Types::GatewayInterceptorConfiguration>]
+    #
     # @!attribute [rw] workload_identity_details
     #   The workload identity details for the created gateway.
     #   @return [Types::WorkloadIdentityDetails]
@@ -1209,6 +1222,7 @@ module Aws::BedrockAgentCoreControl
       :authorizer_type,
       :authorizer_configuration,
       :kms_key_arn,
+      :interceptor_configurations,
       :workload_identity_details,
       :exception_level)
       SENSITIVE = [:name, :description]
@@ -2234,6 +2248,35 @@ module Aws::BedrockAgentCoreControl
       class Unknown < ExtractionConfiguration; end
     end
 
+    # The configuration for an interceptor on a gateway. This structure
+    # defines settings for an interceptor that will be invoked during the
+    # invocation of the gateway.
+    #
+    # @!attribute [rw] interceptor
+    #   The infrastructure settings of an interceptor configuration. This
+    #   structure defines how the interceptor can be invoked.
+    #   @return [Types::InterceptorConfiguration]
+    #
+    # @!attribute [rw] interception_points
+    #   The supported points of interception. This field specifies which
+    #   points during the gateway invocation to invoke the interceptor
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] input_configuration
+    #   The configuration for the input of the interceptor. This field
+    #   specifies how the input to the interceptor is constructed
+    #   @return [Types::InterceptorInputConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GatewayInterceptorConfiguration AWS API Documentation
+    #
+    class GatewayInterceptorConfiguration < Struct.new(
+      :interceptor,
+      :interception_points,
+      :input_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The configuration for a gateway protocol. This structure defines how
     # the gateway communicates with external services.
     #
@@ -2839,6 +2882,10 @@ module Aws::BedrockAgentCoreControl
     #   gateway.
     #   @return [String]
     #
+    # @!attribute [rw] interceptor_configurations
+    #   The interceptors configured on the gateway.
+    #   @return [Array<Types::GatewayInterceptorConfiguration>]
+    #
     # @!attribute [rw] workload_identity_details
     #   The workload identity details for the gateway.
     #   @return [Types::WorkloadIdentityDetails]
@@ -2872,6 +2919,7 @@ module Aws::BedrockAgentCoreControl
       :authorizer_type,
       :authorizer_configuration,
       :kms_key_arn,
+      :interceptor_configurations,
       :workload_identity_details,
       :exception_level)
       SENSITIVE = [:name, :description]
@@ -3263,6 +3311,44 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The interceptor configuration.
+    #
+    # @note InterceptorConfiguration is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note InterceptorConfiguration is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of InterceptorConfiguration corresponding to the set member.
+    #
+    # @!attribute [rw] lambda
+    #   The details of the lambda function used for the interceptor.
+    #   @return [Types::LambdaInterceptorConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/InterceptorConfiguration AWS API Documentation
+    #
+    class InterceptorConfiguration < Struct.new(
+      :lambda,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class Lambda < InterceptorConfiguration; end
+      class Unknown < InterceptorConfiguration; end
+    end
+
+    # The input configuration of the interceptor.
+    #
+    # @!attribute [rw] pass_request_headers
+    #   Indicates whether to pass request headers as input into the
+    #   interceptor. When set to true, request headers will be passed.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/InterceptorInputConfiguration AWS API Documentation
+    #
+    class InterceptorInputConfiguration < Struct.new(
+      :pass_request_headers)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This exception is thrown if there was an unexpected error during
     # processing of request
     #
@@ -3336,6 +3422,20 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The lambda configuration for the interceptor
+    #
+    # @!attribute [rw] arn
+    #   The arn of the lambda function to be invoked for the interceptor.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/LambdaInterceptorConfiguration AWS API Documentation
+    #
+    class LambdaInterceptorConfiguration < Struct.new(
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # LifecycleConfiguration lets you manage the lifecycle of runtime
     # sessions and resources in AgentCore Runtime. This configuration helps
     # optimize resource utilization by automatically cleaning up idle
@@ -5953,6 +6053,10 @@ module Aws::BedrockAgentCoreControl
     #   The updated ARN of the KMS key used to encrypt the gateway.
     #   @return [String]
     #
+    # @!attribute [rw] interceptor_configurations
+    #   The updated interceptor configurations for the gateway.
+    #   @return [Array<Types::GatewayInterceptorConfiguration>]
+    #
     # @!attribute [rw] exception_level
     #   The level of detail in error messages returned when invoking the
     #   gateway.
@@ -5976,6 +6080,7 @@ module Aws::BedrockAgentCoreControl
       :authorizer_type,
       :authorizer_configuration,
       :kms_key_arn,
+      :interceptor_configurations,
       :exception_level)
       SENSITIVE = [:name, :description]
       include Aws::Structure
@@ -6042,6 +6147,10 @@ module Aws::BedrockAgentCoreControl
     #   The updated ARN of the KMS key used to encrypt the gateway.
     #   @return [String]
     #
+    # @!attribute [rw] interceptor_configurations
+    #   The updated interceptor configurations for the gateway.
+    #   @return [Array<Types::GatewayInterceptorConfiguration>]
+    #
     # @!attribute [rw] workload_identity_details
     #   The workload identity details for the updated gateway.
     #   @return [Types::WorkloadIdentityDetails]
@@ -6075,6 +6184,7 @@ module Aws::BedrockAgentCoreControl
       :authorizer_type,
       :authorizer_configuration,
       :kms_key_arn,
+      :interceptor_configurations,
       :workload_identity_details,
       :exception_level)
       SENSITIVE = [:name, :description]

data/lib/aws-sdk-bedrockagentcorecontrol.rb

@@ -55,7 +55,7 @@ module Aws::BedrockAgentCoreControl
   autoload :EndpointProvider, 'aws-sdk-bedrockagentcorecontrol/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-bedrockagentcorecontrol/endpoints'
 
-  GEM_VERSION = '1.14.0'
+  GEM_VERSION = '1.15.0'
 
 end
 

data/sig/client.rbs

@@ -246,9 +246,10 @@ module Aws
         def role_arn: () -> ::String
         def protocol_type: () -> ("MCP")
         def protocol_configuration: () -> Types::GatewayProtocolConfiguration
-        def authorizer_type: () -> ("CUSTOM_JWT" | "AWS_IAM")
+        def authorizer_type: () -> ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
         def authorizer_configuration: () -> Types::AuthorizerConfiguration
         def kms_key_arn: () -> ::String
+        def interceptor_configurations: () -> ::Array[Types::GatewayInterceptorConfiguration]
         def workload_identity_details: () -> Types::WorkloadIdentityDetails
         def exception_level: () -> ("DEBUG")
       end
@@ -266,7 +267,7 @@ module Aws
                                 search_type: ("SEMANTIC")?
                               }?
                             },
-                            authorizer_type: ("CUSTOM_JWT" | "AWS_IAM"),
+                            authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE"),
                             ?authorizer_configuration: {
                               custom_jwt_authorizer: {
                                 discovery_url: ::String,
@@ -275,6 +276,19 @@ module Aws
                               }?
                             },
                             ?kms_key_arn: ::String,
+                            ?interceptor_configurations: Array[
+                              {
+                                interceptor: {
+                                  lambda: {
+                                    arn: ::String
+                                  }?
+                                },
+                                interception_points: Array[("REQUEST" | "RESPONSE")],
+                                input_configuration: {
+                                  pass_request_headers: bool
+                                }?
+                              },
+                            ],
                             ?exception_level: ("DEBUG"),
                             ?tags: Hash[::String, ::String]
                           ) -> _CreateGatewayResponseSuccess
@@ -774,9 +788,10 @@ module Aws
         def role_arn: () -> ::String
         def protocol_type: () -> ("MCP")
         def protocol_configuration: () -> Types::GatewayProtocolConfiguration
-        def authorizer_type: () -> ("CUSTOM_JWT" | "AWS_IAM")
+        def authorizer_type: () -> ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
         def authorizer_configuration: () -> Types::AuthorizerConfiguration
         def kms_key_arn: () -> ::String
+        def interceptor_configurations: () -> ::Array[Types::GatewayInterceptorConfiguration]
         def workload_identity_details: () -> Types::WorkloadIdentityDetails
         def exception_level: () -> ("DEBUG")
       end
@@ -1163,9 +1178,10 @@ module Aws
         def role_arn: () -> ::String
         def protocol_type: () -> ("MCP")
         def protocol_configuration: () -> Types::GatewayProtocolConfiguration
-        def authorizer_type: () -> ("CUSTOM_JWT" | "AWS_IAM")
+        def authorizer_type: () -> ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
         def authorizer_configuration: () -> Types::AuthorizerConfiguration
         def kms_key_arn: () -> ::String
+        def interceptor_configurations: () -> ::Array[Types::GatewayInterceptorConfiguration]
         def workload_identity_details: () -> Types::WorkloadIdentityDetails
         def exception_level: () -> ("DEBUG")
       end
@@ -1183,7 +1199,7 @@ module Aws
                                 search_type: ("SEMANTIC")?
                               }?
                             },
-                            authorizer_type: ("CUSTOM_JWT" | "AWS_IAM"),
+                            authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE"),
                             ?authorizer_configuration: {
                               custom_jwt_authorizer: {
                                 discovery_url: ::String,
@@ -1192,6 +1208,19 @@ module Aws
                               }?
                             },
                             ?kms_key_arn: ::String,
+                            ?interceptor_configurations: Array[
+                              {
+                                interceptor: {
+                                  lambda: {
+                                    arn: ::String
+                                  }?
+                                },
+                                interception_points: Array[("REQUEST" | "RESPONSE")],
+                                input_configuration: {
+                                  pass_request_headers: bool
+                                }?
+                              },
+                            ],
                             ?exception_level: ("DEBUG")
                           ) -> _UpdateGatewayResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateGatewayResponseSuccess

data/sig/types.rbs

@@ -299,9 +299,10 @@ module Aws::BedrockAgentCoreControl
       attr_accessor role_arn: ::String
       attr_accessor protocol_type: ("MCP")
       attr_accessor protocol_configuration: Types::GatewayProtocolConfiguration
-      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM")
+      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
       attr_accessor authorizer_configuration: Types::AuthorizerConfiguration
       attr_accessor kms_key_arn: ::String
+      attr_accessor interceptor_configurations: ::Array[Types::GatewayInterceptorConfiguration]
       attr_accessor exception_level: ("DEBUG")
       attr_accessor tags: ::Hash[::String, ::String]
       SENSITIVE: [:name, :description]
@@ -320,9 +321,10 @@ module Aws::BedrockAgentCoreControl
       attr_accessor role_arn: ::String
       attr_accessor protocol_type: ("MCP")
       attr_accessor protocol_configuration: Types::GatewayProtocolConfiguration
-      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM")
+      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
       attr_accessor authorizer_configuration: Types::AuthorizerConfiguration
       attr_accessor kms_key_arn: ::String
+      attr_accessor interceptor_configurations: ::Array[Types::GatewayInterceptorConfiguration]
       attr_accessor workload_identity_details: Types::WorkloadIdentityDetails
       attr_accessor exception_level: ("DEBUG")
       SENSITIVE: [:name, :description]
@@ -671,6 +673,13 @@ module Aws::BedrockAgentCoreControl
       end
     end
 
+    class GatewayInterceptorConfiguration
+      attr_accessor interceptor: Types::InterceptorConfiguration
+      attr_accessor interception_points: ::Array[("REQUEST" | "RESPONSE")]
+      attr_accessor input_configuration: Types::InterceptorInputConfiguration
+      SENSITIVE: []
+    end
+
     class GatewayProtocolConfiguration
       attr_accessor mcp: Types::MCPGatewayConfiguration
       attr_accessor unknown: untyped
@@ -689,7 +698,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor description: ::String
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
-      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM")
+      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
       attr_accessor protocol_type: ("MCP")
       SENSITIVE: [:name, :description]
     end
@@ -829,9 +838,10 @@ module Aws::BedrockAgentCoreControl
       attr_accessor role_arn: ::String
       attr_accessor protocol_type: ("MCP")
       attr_accessor protocol_configuration: Types::GatewayProtocolConfiguration
-      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM")
+      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
       attr_accessor authorizer_configuration: Types::AuthorizerConfiguration
       attr_accessor kms_key_arn: ::String
+      attr_accessor interceptor_configurations: ::Array[Types::GatewayInterceptorConfiguration]
       attr_accessor workload_identity_details: Types::WorkloadIdentityDetails
       attr_accessor exception_level: ("DEBUG")
       SENSITIVE: [:name, :description]
@@ -950,6 +960,22 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class InterceptorConfiguration
+      attr_accessor lambda: Types::LambdaInterceptorConfiguration
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class Lambda < InterceptorConfiguration
+      end
+      class Unknown < InterceptorConfiguration
+      end
+    end
+
+    class InterceptorInputConfiguration
+      attr_accessor pass_request_headers: bool
+      SENSITIVE: []
+    end
+
     class InternalServerException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -973,6 +999,11 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class LambdaInterceptorConfiguration
+      attr_accessor arn: ::String
+      SENSITIVE: []
+    end
+
     class LifecycleConfiguration
       attr_accessor idle_runtime_session_timeout: ::Integer
       attr_accessor max_lifetime: ::Integer
@@ -1827,9 +1858,10 @@ module Aws::BedrockAgentCoreControl
       attr_accessor role_arn: ::String
       attr_accessor protocol_type: ("MCP")
       attr_accessor protocol_configuration: Types::GatewayProtocolConfiguration
-      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM")
+      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
       attr_accessor authorizer_configuration: Types::AuthorizerConfiguration
       attr_accessor kms_key_arn: ::String
+      attr_accessor interceptor_configurations: ::Array[Types::GatewayInterceptorConfiguration]
       attr_accessor exception_level: ("DEBUG")
       SENSITIVE: [:name, :description]
     end
@@ -1847,9 +1879,10 @@ module Aws::BedrockAgentCoreControl
       attr_accessor role_arn: ::String
       attr_accessor protocol_type: ("MCP")
       attr_accessor protocol_configuration: Types::GatewayProtocolConfiguration
-      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM")
+      attr_accessor authorizer_type: ("CUSTOM_JWT" | "AWS_IAM" | "NONE")
       attr_accessor authorizer_configuration: Types::AuthorizerConfiguration
       attr_accessor kms_key_arn: ::String
+      attr_accessor interceptor_configurations: ::Array[Types::GatewayInterceptorConfiguration]
       attr_accessor workload_identity_details: Types::WorkloadIdentityDetails
       attr_accessor exception_level: ("DEBUG")
       SENSITIVE: [:name, :description]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-bedrockagentcorecontrol
 version: !ruby/object:Gem::Version
-  version: 1.14.0
+  version: 1.15.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.234.0
+        version: 3.239.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.234.0
+        version: 3.239.1
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement